agent.iac-architectureInfrastructure architecture review
Reviews infrastructure-as-code and container definitions as a system: blast radius, least privilege, network segmentation, backup/DR, secrets management and supply chain of images and CI actions. (agentic, uses Claude)
- Engine
- Agent
- Targets
- Infrastructure as code, Container
- Areas
- Security, Reliability, Supply chain
- Runs
- Opt-in: only when selected with --only
- Network
- Contacts services beyond the target
Run only this auditor
bunx openaudit . --only agent.iac-architectureRuns a playbook with the Claude Agent SDK. Needs ANTHROPIC_API_KEY or a Claude Code login; host agents can run the same playbook over MCP without a key.
Playbook
Reviews infrastructure-as-code and container definitions as a system: blast radius, least privilege, network segmentation, backup/DR, secrets management and supply chain of images and CI actions.
Host agents fetch it with get_playbook over MCP. How playbooks work